EDBT 2026 Demo / reviewers in the wild / expert
Ziang Yan
dblp:185/0727
· DBLP profile ↗
13ranked-venue papers
7as first author
9since 2021 · last 2026
—ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 10 · 6 first-author · 7 since 2021Graphics, computer vision, multimedia, augmented reality and games · 4 · 2 first-author · 4 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021Human-computer interaction and ubiquitous computing · 1 · 1 first-authorApplied, interdisciplinary, general and emerging computing · 1 · 1 first-author
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
7 papers |
Vision and language · 43% Video understanding and tracking · 20% Trustworthy machine learning · 14% | |
| Network and information security
2 papers |
Security and privacy of machine learning · 100% | |
| Databases, data mining, and information retrieval
1 paper |
Web and social media mining · 50% Data mining · 50% |
Topics — the 26 heaviest of 26, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Computer vision › Vision and language › vision-language model
multimodal large language model |
2.6 | 3 | 2025 | StreamForest: Efficient Online Video Understanding with Persistent Event Memory · NeurIPS 2025 TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuning · ICLR 2025 Task Preference Optimization: Improving Multimodal Large Language Models with Vision Task Alignment · CVPR 2025 |
Security and privacy of machine learning
adversarial attack |
0.9 | 2 | 2021 | Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples · ICLR 2021 Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks · NeurIPS 2019 |
Security and privacy of machine learning › adversarial attack
black-box attack |
0.9 | 2 | 2021 | Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples · ICLR 2021 Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks · NeurIPS 2019 |
Computer vision › Video understanding and tracking
long video understanding |
0.9 | 1 | 2025 | TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuning · ICLR 2025 |
Computer vision › Vision and language › vision-language model › multimodal large language model
multimodal large language model reasoning |
0.9 | 1 | 2025 | VideoChat-R1.5: Visual Test-Time Scaling to Reinforce Multimodal Reasoning by Iterative Perception · NeurIPS 2025 |
Machine learning › Reinforcement learning › reward design
reinforcement learning with verifiable rewards |
0.9 | 1 | 2025 | VideoChat-R1.5: Visual Test-Time Scaling to Reinforce Multimodal Reasoning by Iterative Perception · NeurIPS 2025 |
Computer vision › Video understanding and tracking
streaming video understanding |
0.9 | 1 | 2025 | StreamForest: Efficient Online Video Understanding with Persistent Event Memory · NeurIPS 2025 |
Natural language and speech › Language models and text generation › alignment
task alignment |
0.9 | 1 | 2025 | Task Preference Optimization: Improving Multimodal Large Language Models with Vision Task Alignment · CVPR 2025 |
Computer vision › Vision and language
temporal grounding |
0.9 | 1 | 2025 | TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuning · ICLR 2025 |
Computer vision › Vision and language
video captioning |
0.9 | 1 | 2025 | TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuning · ICLR 2025 |
Computer vision › Vision and language
video-language model |
0.9 | 1 | 2025 | TimeSuite: Improving MLLMs for Long Video Understanding via Grounded Tuning · ICLR 2025 |
Computer vision › Video understanding and tracking
video question answering |
0.9 | 1 | 2025 | StreamForest: Efficient Online Video Understanding with Persistent Event Memory · NeurIPS 2025 |
Data mining
spatiotemporal data mining |
0.9 | 1 | 2025 | Correlation-Attention Masked Temporal Transformer for User Identity Linkage Using Heterogeneous Mobility Data · AAAI 2025 |
Web and social media mining
user identity linkage |
0.9 | 1 | 2025 | Correlation-Attention Masked Temporal Transformer for User Identity Linkage Using Heterogeneous Mobility Data · AAAI 2025 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
0.8 | 2 | 2021 | Adversarial Margin Maximization Networks · IEEE Trans. Pattern Anal. Mach. Intell. 2021 Deep Defense: Training DNNs with Improved Adversarial Robustness · NeurIPS 2018 |
Machine learning › Learning theory
margin maximization |
0.5 | 1 | 2021 | Adversarial Margin Maximization Networks · IEEE Trans. Pattern Anal. Mach. Intell. 2021 |
Machine learning › Deep learning architectures and training
regularization |
0.5 | 1 | 2021 | Adversarial Margin Maximization Networks · IEEE Trans. Pattern Anal. Mach. Intell. 2021 |
Machine learning › Trustworthy machine learning
robustness |
0.5 | 1 | 2021 | Adversarial Margin Maximization Networks · IEEE Trans. Pattern Anal. Mach. Intell. 2021 |
Security and privacy of machine learning › adversarial attack › black-box attack
hard-label attack |
0.5 | 1 | 2021 | Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples · ICLR 2021 |
Security and privacy of machine learning › adversarial attack
query-efficient attack |
0.4 | 1 | 2019 | Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks · NeurIPS 2019 |
Machine learning › Trustworthy machine learning › adversarial machine learning
adversarial defense |
0.3 | 1 | 2018 | Deep Defense: Training DNNs with Improved Adversarial Robustness · NeurIPS 2018 |
Machine learning › Trustworthy machine learning › robustness › adversarial robustness
adversarial training |
0.3 | 1 | 2018 | Deep Defense: Training DNNs with Improved Adversarial Robustness · NeurIPS 2018 |
Computer vision › Image recognition and object detection
fine-grained visual understanding |
0.3 | 1 | 2025 | Task Preference Optimization: Improving Multimodal Large Language Models with Vision Task Alignment · CVPR 2025 |
Computer vision › Video understanding and tracking › spatio-temporal analysis
spatio-temporal perception |
0.3 | 1 | 2025 | VideoChat-R1.5: Visual Test-Time Scaling to Reinforce Multimodal Reasoning by Iterative Perception · NeurIPS 2025 |
Machine learning › Reinforcement learning
policy learning |
0.1 | 1 | 2021 | Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples · ICLR 2021 |
Computer vision › Image recognition and object detection
image classification |
0.1 | 1 | 2018 | Deep Defense: Training DNNs with Improved Adversarial Robustness · NeurIPS 2018 |
Methods — techniques the papers use, named apart from their topics
reinforcement learning · 1.9instruction tuning · 1.7transformer · 0.9token shuffling · 0.9test-time scaling · 0.9temporal adaptive position encoding · 0.9task preference optimization · 0.9multi-task co-training · 0.9learnable task tokens · 0.9iterative perception · 0.9event memory · 0.9correlation attention · 0.9query-based attack · 0.5transfer attack · 0.4subspace projection · 0.4gradient estimation · 0.4
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | VideoTG-R1: Boosting Video Temporal Grounding via Curriculum Reinforcement Learning on Reflected Boundary AnnotationsabstractVideo temporal grounding (VTG) aims to locate precise segments in videos based on language queries, which is a fundamental challenge in video understanding. While recent Multimodal Large Language Models (MLLMs) have shown promise in tackling VTG through reinforcement learning (RL), they overlook the challenges arising from both the quality and difficulty of training samples. (1) Partially annotated samples. Many manually annotated samples contain relevant segments beyond the annotated interval, introducing ambiguous supervision. (2) Hard-to-ground samples. Samples with poor zero-shot performance produce consistently low and indistinguishable rewards during RL training, exhibiting no clear preference among multiple outputs and thus hindering learning efficiency. To address these challenges, we propose VideoTG-R1, a novel curriculum RL framework with reflected boundary annotations, enabling data-efficient training. Specifically, we propose a Boundary Reflection Agent that utilizes MLLMs to predict query-relevant timestamps outside the annotated intervals, allowing us to identify and filter out partially annotated samples, thereby reducing ambiguity. Furthermore, we introduce a Difficulty Estimation Agent to assess the training difficulty of each sample and design a curriculum RL strategy that dynamically masks the videos of hard-to-ground samples according to the training steps, easing the training difficulty and providing clearer preference. Experiments on the VTG and grounded VideoQA tasks demonstrate the effectiveness of our method. Remarkably, with only 10% of the training samples and 21% of the computational budget, VideoTG-R1 outperforms full-data counterparts under both group relative policy optimization (GRPO) and supervised fine-tuning (SFT). The code is available at https://github.com/ldong1111/VideoTG-R1. Lu Dong 0005, Ziang Yan, Xiangyu Zeng 0004, Hongjie Zhang 0002, Yifei Huang 0006, Yi Wang 0033, Zhen-Hua Ling, Limin Wang 0002, Yali Wang 0001 |
ICMR | 4 |
| 2025 | Correlation-Attention Masked Temporal Transformer for User Identity Linkage Using Heterogeneous Mobility DataabstractWith the rise of social media and Location-Based Social Networks (LBSN), check-in data across platforms has become crucial for User Identity Linkage (UIL). These data not only reveal users' spatio-temporal information but also provide insights into their behavior patterns and interests. However, cross-platform identity linkage faces challenges like poor data quality, high sparsity, and noise interference, which hinder existing methods from extracting cross-platform user information. To address these issues, we propose a Correlation-Attention Masked Transformer for User Identity Link age Network (MT-Link), a transformer-based framework to enhance model performance by learning spatio-temporal co-occurrence patterns of cross-platform users. Our model effectively captures spatio-temporal co-occurrence in cross-platform user check-in sequences. It employs a correlation attention mechanism to detect the spatio-temporal co-occurrence between user check-in sequences. Guided by attention weight maps, the model focuses on co-occurrence points while filtering out noise, ultimately improving classification performance. Experimental results show that our model significantly outperforms state-of-the-art baselines by 12.92%-17.76% and 5.80%-8.38% improvements in terms of Macro-F1 and Area Under Curve (AUC). Ziang Yan, Xingyu Zhao 0006, Hanqing Ma, Wei Chen 0070, Jianpeng Qi, Yanwei Yu, Junyu Dong |
AAAI | 1 |
| 2025 | Task Preference Optimization: Improving Multimodal Large Language Models with Vision Task AlignmentabstractCurrent multimodal large language models (MLLMs) struggle with fine-grained or precise understanding of visuals although they give comprehensive perception and reasoning in a spectrum of vision applications. Recent studies either develop tool-using or unify specific visual tasks into the autoregressive framework, often at the expense of overall multimodal performance. To address this issue and enhance MLLMs with visual tasks in a scalable fashion, we propose Task Preference Optimization (TPO), a novel method that utilizes differentiable task preferences derived from typical fine-grained visual tasks. TPO introduces learnable task tokens that establish connections between multiple task-specific heads and the MLLM. By leveraging rich visual labels during training, TPO significantly enhances the MLLM’s multimodal capabilities and task-specific performance. Through multi-task co-training within TPO, we observe synergistic benefits that elevate individual task performance beyond what is achievable through single-task training methodologies. Our instantiation of this approach with VideoChat and LLaVA demonstrates an overall 14.6% improvement in multimodal performance compared to baseline models. Additionally, MLLM-TPO demonstrates robust zero-shot capabilities across various tasks, performing comparably to state-of-the-art supervised models. Ziang Yan, Yinan He, Chenting Wang, Kunchang Li 0002, Xinhao Li 0004, Xiangyu Zeng 0004, Zilei Wang, Yali Wang 0001, Yu Qiao 0001, Limin Wang 0002, Yi Wang 0074 |
CVPR | 1 |
| 2025 | TimeSuite: Improving MLLMs for Long Video Understanding via Grounded TuningabstractMultimodal Large Language Models (MLLMs) have demonstrated impressive performance in short video understanding. However, understanding long-form videos still remains challenging for MLLMs. This paper proposes TimeSuite, a collection of new designs to adapt the existing short-form video MLLMs for long video understanding, including a simple yet efficient framework to process long video sequence, a high-quality video dataset for grounded tuning of MLLMs, and a carefully-designed instruction tuning task to explicitly incorporate the grounding supervision in the traditional QA format. Specifically, based on VideoChat, we propose our long-video MLLM, coined as VideoChat-T, by implementing a token shuffling to compress long video tokens and introducing Temporal Adaptive Position Encoding (TAPE) to enhance the temporal awareness of visual representation. Meanwhile, we introduce the TimePro, a comprehensive grounding-centric instruction tuning dataset composed of 9 tasks and 349k high-quality grounded annotations. Notably, we design a new instruction tuning task type, called Temporal Grounded Caption, to peform detailed video descriptions with the corresponding time stamps prediction. This explicit temporal location prediction will guide MLLM to correctly attend on the visual content when generating description, and thus reduce the hallucination risk caused by the LLMs. Experimental results demonstrate that our TimeSuite provides a successful solution to enhance the long video understanding capability of short-form MLLM, achieving improvement of 5.6% and 6.8% on the benchmarks of Egoschema and VideoMME, respectively. In addition, VideoChat-T exhibits robust zero-shot temporal grounding capabilities, significantly outperforming the existing state-of-the-art MLLMs. After fine-tuning, it performs on par with the traditional supervised expert models. Xiangyu Zeng 0004, Kunchang Li 0002, Chenting Wang, Xinhao Li 0004, Tianxiang Jiang, Ziang Yan, Yansong Shi, Zhengrong Yue, Yi Wang 0074, Yali Wang 0001, Yu Qiao 0001, Limin Wang 0002 |
ICLR | 6 |
| 2025 | VideoChat-R1.5: Visual Test-Time Scaling to Reinforce Multimodal Reasoning by Iterative PerceptionabstractInducing reasoning in multimodal large language models (MLLMs) is critical for achieving human-level perception and understanding. Existing methods mainly leverage LLM reasoning to analyze parsed visuals, often limited by static perception stages. This paper introduces Visual Test-Time Scaling (VTTS), a novel approach to enhance MLLMs' reasoning via iterative perception during inference. VTTS mimics humans' hierarchical attention by progressively refining focus on high-confidence spatio-temporal regions, guided by updated textual predictions. Specifically, VTTS employs an Iterative Perception (ITP) mechanism, incorporating reinforcement learning with spatio-temporal supervision to optimize reasoning. To support this paradigm, we also present VTTS-80K, a dataset tailored for iterative perception.
These designs allows a MLLM to enhance its performance by increasing its perceptual compute. Extensive experiments validate VTTS's effectiveness and generalization across diverse tasks and benchmarks. Our newly introduced Videochat-R1.5 model has achieved remarkable improvements, with an average increase of over 5\%, compared to robust baselines such as Qwen2.5VL-3B and -7B, across more than 15 benchmarks that encompass video conversation, video reasoning, and spatio-temporal perception. Ziang Yan, Yinan He, Xinhao Li 0004, Zhengrong Yue, Xiangyu Zeng 0004, Yali Wang 0001, Yu Qiao 0001, Limin Wang 0002, Yi Wang 0074 |
NeurIPS | 1 |
| 2025 | StreamForest: Efficient Online Video Understanding with Persistent Event MemoryabstractMultimodal Large Language Models (MLLMs) have recently achieved remarkable progress in video understanding. However, their effectiveness in real-time streaming scenarios remains limited due to storage constraints of historical visual features and insufficient real-time spatiotemporal reasoning. To address these challenges, we propose StreamForest, a novel architecture specifically designed for streaming video understanding. Central to StreamForest is the Persistent Event Memory Forest, a memory mechanism that adaptively organizes video frames into multiple event-level tree structures. This process is guided by penalty functions based on temporal distance, content similarity, and merge frequency, enabling efficient long-term memory retention under limited computational resources. To enhance real-time perception, we introduce a Fine-grained Spatiotemporal Window, which captures detailed short-term visual cues to improve current scene perception. Additionally, we present OnlineIT, an instruction-tuning dataset tailored for streaming video tasks. OnlineIT significantly boosts MLLM performance in both real-time perception and future prediction. To evaluate generalization in practical applications, we introduce ODV-Bench, a new benchmark focused on real-time streaming video understanding in autonomous driving scenarios. Experimental results demonstrate that StreamForest achieves the state-of-the-art performance, with accuracies of 77.3% on StreamingBench, 60.5% on OVBench, and 55.6% on OVO-Bench. In particular, even under extreme visual token compression (limited to 1024 tokens), the model retains 96.8% of its average accuracy in eight benchmarks relative to the default setting. These results underscore the robustness, efficiency, and generalizability of StreamForest for streaming video understanding. Xiangyu Zeng 0004, Kefan Qiu, Xinhao Li 0004, Ziang Yan, Xinhai Zhao, Yi Wang 0074, Limin Wang 0002 |
NeurIPS | 7 |
| 2021 | FMA-ETA: Estimating Travel Time Entirely Based on FFN with AttentionabstractEstimated time of arrival (ETA) is one of the most important services in intelligent transportation systems (ITS) and becomes a challenging spatial-temporal (ST) data mining task in recent years. Nowadays, deep learning based methods, specifically recurrent neural networks (RNN) based ones are adapted to model the ST patterns from massive data for ETA and become the state-of-the-art. However, RNN is suffering from slow training and inference speed, as its structure is unfriendly to parallel computing. To solve this problem, we propose a novel, brief and effective framework mainly based on feed-forward network (FFN) for ETA, FFN with Multifactor Attention (FMA-ETA). The novel Multi-factor Attention mechanism is proposed to deal with different category features and aggregate the information purposefully. Extensive experimental results on the real-world vehicle travel dataset show FMA-ETA is competitive with state-of-the-art methods in terms of the prediction accuracy with significantly better inference speed. Yulu Wang, Kun Fu 0002, Zheng Wang 0010, Ziang Yan, Changshui Zhang, Jieping Ye |
ICASSP | 5 |
| 2021 | Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples
Ziang Yan, Yiwen Guo, Jian Liang 0002, Changshui Zhang |
ICLR | 1 |
| 2021 | Adversarial Margin Maximization NetworksabstractThe tremendous recent success of deep neural networks (DNNs) has sparked a surge of interest in understanding their predictive ability. Unlike the human visual system which is able to generalize robustly and learn with little supervision, DNNs normally require a massive amount of data to learn new concepts. In addition, research works also show that DNNs are vulnerable to adversarial examples-maliciously generated images which seem perceptually similar to the natural ones but are actually formed to fool learning models, which means the models have problem generalizing to unseen data with certain type of distortions. In this paper, we analyze the generalization ability of DNNs comprehensively and attempt to improve it from a geometric point of view. We propose adversarial margin maximization (AMM), a learning-based regularization which exploits an adversarial perturbation as a proxy. It encourages a large margin in the input space, just like the support vector machines. With a differentiable formulation of the perturbation, we train the regularized DNNs simply through back-propagation in an end-to-end manner. Experimental results on various datasets (including MNIST, CIFAR-10/100, SVHN and ImageNet) and different DNN architectures demonstrate the superiority of our method over previous state-of-the-arts. Code and models for reproducing our results will be made publicly available. Ziang Yan, Yiwen Guo, Changshui Zhang |
IEEE Trans. Pattern Anal. Mach. Intell. | 1 |
| 2019 | Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box AttacksabstractUnlike the white-box counterparts that are widely studied and readily accessible, adversarial examples in black-box settings are generally more Herculean on account of the difficulty of estimating gradients. Many methods achieve the task by issuing numerous queries to target classification systems, which makes the whole procedure costly and suspicious to the systems. In this paper, we aim at reducing the query complexity of black-box attacks in this category. We propose to exploit gradients of a few reference models which arguably span some promising search subspaces. Experimental results show that, in comparison with the state-of-the-arts, our method can gain up to 2x and 4x reductions in the requisite mean and medium numbers of queries with much lower failure rates even if the reference models are trained on a small and inadequate dataset disjoint to the one for training the victim model. Code and models for reproducing our results will be made publicly available. Yiwen Guo, Ziang Yan, Changshui Zhang |
NeurIPS | 2 |
| 2018 | Deep Defense: Training DNNs with Improved Adversarial RobustnessabstractDespite the efficacy on a variety of computer vision tasks, deep neural networks (DNNs) are vulnerable to adversarial attacks, limiting their applications in security-critical systems. Recent works have shown the possibility of generating imperceptibly perturbed image inputs (a.k.a., adversarial examples) to fool well-trained DNN classifiers into making arbitrary predictions. To address this problem, we propose a training recipe named "deep defense". Our core idea is to integrate an adversarial perturbation-based regularizer into the classification objective, such that the obtained models learn to resist potential attacks, directly and precisely. The whole optimization problem is solved just like training a recursive network. Experimental results demonstrate that our method outperforms training with adversarial/Parseval regularizations by large margins on various datasets (including MNIST, CIFAR-10 and ImageNet) and different DNN architectures. Code and models for reproducing our results are available at https://github.com/ZiangYan/deepdefense.pytorch. Ziang Yan, Yiwen Guo, Changshui Zhang |
NeurIPS | 1 |
| 2018 | Attribute-Based Synthetic Network (ABS-Net): Learning more from pseudo feature representations
Jiang Lu, Jin Li 0020, Ziang Yan, Fenghua Mei, Changshui Zhang |
Pattern Recognit. | 3 |
| 2017 | Rare Chinese character recognition by Radical Extraction NetworkabstractBuilding a modern Optical Character Recognition (OCR) system for Chinese is hard due to the large Chinese vocabulary list. Training images for rare Chinese characters are extremely expensive to obtain. Radical-based OCR systems tackle this problem by first extracting and recognizing basic graphical components (i.e., radicals) of a Chinese character. However, how to reliably recognize radicals still remains an open challenge. In this paper, we propose a novel Radical Extraction Network (REN) to extract and recognize radicals using deep Convolutional Neural Network (CNN). REN is end-to-end trainable, and it needs less hand-tunning compared with previous segmentation-based approaches. Deep appearance models for radicals are learned from data in a weakly supervised fashion, and no radical-level annotations are required. We learn to recognize different radicals on commonly used Chinese characters, and transfer the learned deep appearance models to rarely used Chinese characters. Experimental results show that the proposed method helps the classifier to recognize rare Chinese characters. Ziang Yan, Chengzhe Yan, Changshui Zhang |
SMC | 1 |